CVE-2008-1547

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

48.14% chance of exploitation in the next 30 days, 99th percentile

Nuclei

medium · CWE-601

Published

2008-10-21

Updated

2024-08-07

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1547.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32489

Security advisories

• http://securityreason.com/securityalert/4441
• http://www.securityfocus.com/archive/1/497374/100/0/threaded
• http://www.securityfocus.com/archive/1/497390/100/0/threaded
• http://www.securityfocus.com/archive/1/497433/100/0/threaded
• http://www.securityfocus.com/archive/1/497500/100/0/threaded
• http://www.securityfocus.com/archive/1/497534/100/0/threaded
• http://www.securityfocus.com/bid/31765

References

• CVE Record
• NVD entry